Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: 6ZEl2Jcf3R7NSZtcwQ9pc080Lk3SleB8JuU0W2Xl/uU=
Subject key identifier: F9:94:62:D8:04:5D:B8:53:E1:FF:E1:B5:1E:94:56:03:94:51:3B:33
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019E205A54B794B5DA96102418DF2C8BD3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 08:00:51 +0000
Manifest this update: Wed 13 May 2026 08:00:51 +0000
Manifest next update: Thu 14 May 2026 08:00:51 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: 5rzVpRUbT/jLTZg64USPcOnjUJLWjdOPvG4th9mCB1w=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:54:b7:94:b5:da:96:10:24:18:df:2c:8b:d3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: May 13 08:00:51 2026 GMT
Not After : May 14 08:00:51 2026 GMT
Subject: CN=f99462d8045db853e1ffe1b51e94560394513b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:a8:58:80:38:9f:9e:c6:a3:90:e1:66:eb:
58:c8:f0:17:39:77:10:62:84:18:eb:9c:6b:74:7a:
22:37:00:6a:5d:ea:d3:18:54:32:7a:5e:0d:eb:72:
38:5f:c9:6f:cd:18:b1:f9:9d:36:51:80:e0:c5:88:
a0:52:d8:64:b0:fa:fe:a7:cf:f6:6e:59:53:a8:94:
6c:de:bd:f0:92:7b:3e:b6:97:06:4d:00:61:8d:eb:
98:ce:40:d4:6b:d1:d4:8c:7c:7e:c5:c3:6e:67:6e:
47:33:b8:7e:2d:26:82:44:a7:a0:f7:17:f5:22:e1:
f9:8f:c3:1a:cb:be:63:5d:66:32:80:a7:97:33:f6:
af:53:27:3a:ab:1b:c2:01:4f:f7:4a:1d:7c:9f:23:
c6:2e:5b:94:be:3d:d6:cb:a9:86:57:a0:e9:4e:57:
b3:29:6c:df:66:6c:26:2e:bc:72:5e:c5:db:48:d6:
a8:ee:bd:58:66:55:0d:aa:d8:6e:38:5e:f8:84:13:
fb:4f:80:e5:08:11:c9:7d:fd:c9:c0:1a:fc:fc:e7:
e8:4c:9a:9d:cb:bf:39:fc:26:57:f2:49:e0:e3:97:
a4:fc:ba:09:4a:57:92:e8:57:9a:bb:3e:66:0e:a4:
21:84:f6:9a:f2:fa:b5:16:ec:25:0e:99:be:93:a3:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:62:D8:04:5D:B8:53:E1:FF:E1:B5:1E:94:56:03:94:51:3B:33
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7e:c7:c3:b5:fd:3a:a7:44:e4:60:3a:aa:86:af:6e:75:8b:
3f:ec:38:43:d8:d8:c3:eb:d1:7c:c6:2c:e9:16:e1:22:45:2b:
dc:d9:d7:c5:25:0e:c5:b6:bb:cf:65:4c:60:e6:ec:be:5c:96:
2a:74:11:70:ca:11:62:0f:f5:77:67:c7:c6:e5:2a:48:af:33:
88:00:94:d7:01:12:61:4a:ca:c9:94:c5:ba:81:2e:4a:a9:a7:
3e:e1:1a:5d:cf:34:22:0a:f8:e6:dc:79:b9:bc:3a:95:e3:f1:
bc:73:d1:78:2f:ab:27:be:45:dd:dc:3e:51:9e:b7:af:82:91:
4d:2c:10:c5:3d:8d:5b:9b:c7:13:92:04:68:19:a3:1d:30:32:
39:63:4b:d2:5f:9c:38:c9:77:6a:7c:ac:d4:5d:cb:bd:2c:cb:
a7:0a:de:48:bc:8d:4d:80:66:28:c8:19:c4:11:85:e4:87:06:
79:41:a7:84:3c:b8:06:de:ec:a1:48:da:a7:f0:09:de:89:33:
08:73:f8:80:72:6d:2f:36:15:ff:73:b9:ec:d1:ef:89:c7:6d:
7a:b1:c4:da:22:12:6a:06:31:f2:04:38:67:2c:e1:06:df:c6:
35:94:30:49:d3:b7:9c:66:73:7c:27:82:14:e9:26:9f:e8:b4:
34:37:51:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWlS3lLXalhAkGN8si9PHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjYwNTEzMDgwMDUxWhcNMjYwNTE0MDgwMDUxWjAzMTEwLwYDVQQD
EyhmOTk0NjJkODA0NWRiODUzZTFmZmUxYjUxZTk0NTYwMzk0NTEzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxSoWIA4n57Go5DhZutYyPAXOXcQ
YoQY65xrdHoiNwBqXerTGFQyel4N63I4X8lvzRix+Z02UYDgxYigUthksPr+p8/2
bllTqJRs3r3wkns+tpcGTQBhjeuYzkDUa9HUjHx+xcNuZ25HM7h+LSaCRKeg9xf1
IuH5j8May75jXWYygKeXM/avUyc6qxvCAU/3Sh18nyPGLluUvj3Wy6mGV6DpTlez
KWzfZmwmLrxyXsXbSNao7r1YZlUNqthuOF74hBP7T4DlCBHJff3JwBr8/OfoTJqd
y785/CZX8kng45ek/LoJSleS6Feauz5mDqQhhPaa8vq1FuwlDpm+k6P1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmUYtgEXbhT4f/htR6UVgOUUTszMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH7Hw7X9
OqdE5GA6qoavbnWLP+w4Q9jYw+vRfMYs6RbhIkUr3NnXxSUOxba7z2VMYObsvlyW
KnQRcMoRYg/1d2fHxuUqSK8ziACU1wESYUrKyZTFuoEuSqmnPuEaXc80Igr45tx5
ubw6lePxvHPReC+rJ75F3dw+UZ63r4KRTSwQxT2NW5vHE5IEaBmjHTAyOWNL0l+c
OMl3anys1F3LvSzLpwreSLyNTYBmKMgZxBGF5IcGeUGnhDy4Bt7soUjap/AJ3okz
CHP4gHJtLzYV/3O57NHvicdterHE2iISagYx8gQ4ZyzhBt/GNZQwSdO3nGZzfCeC
FOkmn+i0NDdRXg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:07:00 2026 by rpki-client